Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a842b10d-ca97-3357-8561-d207469b7366.roa
File:                     a842b10d-ca97-3357-8561-d207469b7366.roa (raw, json)
Hash identifier:          vmEHpooB6yVrl5tP03jPyBMo30Gx5dzf85H776BcWew=
Subject key identifier:   79:5A:BE:0C:1C:8F:15:B0:F9:8D:ED:F1:D0:2C:87:25:02:7E:58:01
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584968B41EB5D3B95F95FA615A80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a842b10d-ca97-3357-8561-d207469b7366.roa
Signing time:             Fri 04 Apr 2025 01:00:47 +0000
ROA not before:           Fri 04 Apr 2025 01:00:47 +0000
ROA not after:            Thu 03 Jul 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        156.19.96.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:68:b4:1e:b5:d3:b9:5f:95:fa:61:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Apr  4 01:00:47 2025 GMT
            Not After : Jul  3 01:00:47 2025 GMT
        Subject: CN=dbe5c28f-069b-43c1-80b3-be7909882c5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6e:5e:c6:11:73:b9:28:d1:f9:24:9d:8b:eb:
                    83:56:72:88:78:3e:2d:cc:7e:59:c1:c1:21:25:26:
                    dc:bc:44:f0:3e:4e:4f:20:cd:4f:63:14:5e:91:02:
                    34:4c:98:c2:cc:b1:e2:70:e2:47:d2:7c:23:6f:27:
                    44:c2:c4:83:0e:bc:07:28:5f:46:ac:11:13:3e:e6:
                    87:f4:5d:24:64:47:9c:c2:09:c1:68:ec:28:91:37:
                    19:68:cc:b4:45:dc:1e:4d:3b:13:2b:b8:67:06:20:
                    10:d4:11:f7:92:e8:03:36:9b:bc:42:03:f4:71:60:
                    68:44:9a:de:b4:a7:7d:d9:e7:88:8d:ea:41:65:3d:
                    af:7f:0f:ce:3a:dd:7f:19:46:ff:d6:45:bd:8f:06:
                    6b:1c:c3:71:dc:8d:10:90:c3:a6:e7:95:53:51:44:
                    f9:91:ff:f0:9a:02:73:bd:64:ff:ad:4a:eb:d2:39:
                    f4:1e:35:5b:4a:9d:b7:a4:86:33:f3:df:df:3a:ee:
                    73:6e:50:0f:dc:bd:df:c4:74:f1:17:6a:9b:81:3e:
                    0c:42:80:af:2e:70:bc:35:56:78:9d:ec:92:70:2f:
                    94:66:00:2b:0d:b2:41:7d:19:ce:74:24:03:7f:76:
                    09:55:80:13:10:45:5d:53:a4:79:77:5e:b3:c2:25:
                    5e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:5A:BE:0C:1C:8F:15:B0:F9:8D:ED:F1:D0:2C:87:25:02:7E:58:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a842b10d-ca97-3357-8561-d207469b7366.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.19.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:95:30:2e:6b:38:c9:bc:1f:7d:a0:09:3e:f5:a7:4e:c3:54:
         6b:0e:51:9e:15:69:58:f1:0b:59:50:f5:c0:66:24:9f:f4:06:
         77:cb:27:fc:12:da:7f:5e:23:00:4f:81:47:00:5c:4f:b4:ff:
         75:9c:ff:60:cc:6f:23:38:77:fb:ce:d5:47:b7:d1:c7:be:f5:
         45:aa:ca:fb:e7:41:87:ad:aa:3d:d4:55:c6:81:e1:9e:6a:e1:
         06:7d:af:c8:73:c6:77:88:c6:72:08:98:06:7d:f4:eb:93:c7:
         7b:7c:d4:63:6c:60:a6:f8:d9:95:e0:b6:54:ea:fd:2b:75:58:
         b2:3c:bd:fc:0d:c7:5e:8c:4e:2c:f2:45:ce:37:94:10:1e:9a:
         21:7e:35:8f:42:01:c4:9f:94:34:dd:52:f7:ae:c0:06:e9:17:
         f0:5a:e4:7b:32:8a:22:4b:31:8b:20:fc:49:0e:75:cf:d2:41:
         df:b0:4f:82:1a:d2:8e:93:8e:dd:4e:0d:ea:4b:c8:c1:cb:b9:
         e8:1b:ff:1d:e9:3b:af:fc:02:2e:68:09:37:62:c9:1f:05:3d:
         39:60:0c:a9:ad:ae:b3:ca:c2:45:e2:f6:4a:ce:05:57:77:9e:
         77:0f:7b:22:6e:e8:c2:b2:83:87:6d:98:83:69:4b:8e:9a:37:
         b3:f9:5d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:31:45 2025 by rpki-client on console.sobornost.net